MS-10993-PRIME

E-Learning MOC on Demand

Overview

This course teaches IT professionals how to integrate their on-premises AD DS environment with Azure AD and how to use Azure AD as a directory service. It also teaches candidates how to use Azure RMS to protect sensitive documents. Additionally, it focusses on how to enhance authentication with multi-factor authentication and how to monitor directory synchronization health.

Who should attend

The primary audience for this course is existing IT professionals who have some knowledge and experience with Azure, and advanced experience with the Windows Server operating system. In addition, IT professionals who take this course typically want to develop knowledge of identity services integration between on-premises services and cloud services. This would typically include:

AD DS administrators who are looking to train in cloud identity and access technologies.

System or infrastructure administrators with general AD DS experience and knowledge, who are looking for more advanced identity training for Azure services.

Prerequisites

In addition to their professional experience, students who attend this training should already have the following technical knowledge:

Outline

Module 1: Introducing Azure AD

This module describes the differences between Azure AD and AD DS, and the Azure AD versions. It also explains how to perform Azure AD tenant provisioning and how to manage objects and user roles in Azure AD.

Module 2: Integrating on-premises AD DS with Azure

This module explains how to extend an on-premises Active Directory domain to Azure, and how directory synchronization works. It also describes how to implement and configure directory synchronization. Additionally, this module describes how to manage synchronized directories.

Lessons

Extending an on-premises Active Directory domain to Azure

Directory synchronization overview

Implementing and configuring directory synchronization

Managing synchronized directories

Lab: Implementing directory synchronization

Implementing Azure AD Connect

Managing directory synchronization

After completing this module, students will be able to:

Explain how to extend AD DS to the Azure platform.

Describe directory synchronization.

Implement and configure directory synchronization.

Manage synchronized directories.

Module 3: Using Azure AD as a directory service in hybrid environments

This module explains how to use Azure AD as a directory service for an on-premises environment, and how to configure SSO in Azure AD. Also it describes how to implement privileged identity management in Azure AD.

Lessons

Azure AD as a directory service for on-premises environments

Configuring SSO with Azure AD

Implementing privileged identity management in Azure AD

Lab: Using Azure AD in hybrid environments

Joining a Windows 10 computer to Azure AD

Implementing SSO with Azure AD

Configuring and using Azure AD Privileged Identity Management

After completing this module, students will be able to:

Describe how to use Azure AD as a directory service for an on-premises environment.

This module explains how authentication works in hybrid environments. In addition, it describes how to implement Azure Multi-Factor Authentication.

Lessons

Authentication in hybrid environments

Implementing Azure Multi-Factor Authentication

Lab: Configuring authentication in hybrid environments

Implementing self-service password reset

Implementing Azure Multi-Factor Authentication

Implementing Azure Multi-Factor Authentication Server on-premises

After completing this module, students will be able to:

Describe how authentication works.

Implement Azure Multi-Factor Authentication.

Module 5: Deploying Azure RMS with on-premises services

This module explains how rights management technologies, Active Directory RMS, and Azure RMS work. In addition, it describes how to implement Azure RMS, and how to integrate Azure RMS with on-premises services.

Lessons

RMS overview

Implementing Azure RMS

Integrating Azure RMS with on-premises services

Lab: Implementing Azure RMS

Enabling and configuring Azure RMS

Integrating Azure RMS with File Classification Infrastructure (FCI)

Using the RMS sharing application on a client

After completing this module, students will be able to:

Describe the rights management technologies, AD RMS and Azure RMS.

Implement Azure RMS.

Integrate Azure RMS with on-premises services.

Module 6: Monitoring Azure AD

This module describes reports on Azure AD and explains how to configure alerts. It also describes how to monitor directory services infrastructure.